H3C S6550X-HI Series Command Reference Manual page 2266

Parameters
time-based seconds
to 604800 seconds.
traffic-based kilobytes
range of 2560 to 4294967295 Kilobytes. When traffic on an SA reaches this value, the SA expires.
Usage guidelines
You can also configure IPsec SA lifetimes in IPsec policy view or IPsec policy template view. The
device prefers the IPsec SA lifetimes configured in IPsec policy view or IPsec policy template view
over the global IPsec SA lifetimes.
When IKE negotiates IPsec SAs, it uses the local lifetime settings or those proposed by the peer,
whichever are smaller.
An IPsec SA can have both a time-based lifetime and a traffic-based lifetime. The IPsec SA expires
when either lifetime expires. Before the IPsec SA expires, IKE negotiates a new IPsec SA, which
takes over immediately after its creation.
Examples
# Configure the global IPsec SA lifetime as 7200 seconds.
<Sysname> system-view
[ ]
Sysname
# Configure the global IPsec SA lifetime as 10240 Kilobytes.
[ ]
Sysname
Related commands
display ipsec sa
sa duration
ipsec sa global-soft-duration buffer
Use
ipsec sa global-soft-duration buffer
IPsec SA soft lifetime buffer.
Use
undo ipsec sa global-soft-duration buffer
Syntax
ipsec sa global-soft-duration buffer { time-based seconds | traffic-based
kilobytes }
undo ipsec sa global-soft-duration buffer { time-based | traffic-based }
Default
The global time-based and traffic-based IPsec SA soft lifetime buffers are not configured.
Views
System view
Predefined user roles
network-admin
Parameters
time-based seconds
value range is 20 to 201600.
: Specifies the time-based global lifetime for IPsec SAs, in the range of 180
: Specifies the traffic-based global lifetime for IPsec SAs, in the
ipsec sa global-duration time-based 7200
ipsec sa global-duration traffic-based 10240
: Specifies the time-based IPsec SA soft lifetime buffer, in seconds. The
to set the global time-based or traffic-based
to restore the default.
41